General

  • Target

    d13b82ff55442a90c3c9444e73dc709009dc73120e555ab523480217ce982b4d

  • Size

    306KB

  • MD5

    5a4291d4427b053bfa5c351e1dc71d47

  • SHA1

    52ddb8f759b45d49618306c7e2a43879d088f4ad

  • SHA256

    d13b82ff55442a90c3c9444e73dc709009dc73120e555ab523480217ce982b4d

  • SHA512

    f01eddaf8f8bc058bd364f8cff2f9b16dbd785f8e9afb618607dd7e79182378b27437a631b857fde224a1d248fa3a88e8eea9286dd580768bb5ac7279e8efd2a

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d13b82ff55442a90c3c9444e73dc709009dc73120e555ab523480217ce982b4d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections